Are free job trackers safe?
Usually safe enough, if you know what you’re handing over. A job search is a detailed record of your career, salary expectations and contacts. Here is how to judge any free tracker in ten minutes.
What a job tracker can know about you
Over a few months, a tracker builds up your CV, every company you applied to, salary figures, interview notes, recruiter names and emails, and sometimes your inbox. For someone searching while still employed, that is sensitive. A “free” product still pays its costs somehow, usually through a paid upgrade, ads, or (less often) data. None of that is automatically bad, but you should know which one applies.
Three architectures, three risk profiles
| Type | Where your data is | Main risk |
|---|---|---|
| Cloud tracker with account | Vendor servers and their providers | Breach, policy changes, data kept after you leave, broad email permissions |
| Browser extension | Varies: local, cloud or both | Permission to read the pages you visit. Updates can change behaviour |
| Local-first web app (e.g. HireWire, jobstracker.org) | Your browser’s storage | Data loss when site data is cleared. Third-party scripts on the page |
The 10-point checklist
- Is an account required? No account means there is no profile of you on a vendor’s server.
- Where is data stored? Look for a plain statement: “in your browser”, or a named cloud region and provider.
- Does it want your inbox? Full Gmail or Outlook access is the largest permission a tracker can ask for. Prefer tools that let you paste an email, or that request read-only, narrowly scoped access.
- Is your CV uploaded? If it is, find out whether it goes to an AI provider, and whether it is kept.
- What analytics run, and where? Look for session recording or autocapture (which can record what you type) as opposed to named, counted events.
- Ads and trackers. Ad networks set cookies. Check whether they run inside the app or only on marketing pages.
- Can you export everything? An open JSON or CSV export means you can leave at any time.
- Can you delete your data? For cloud tools, is there self-serve account deletion? For local tools, clearing site data does it.
- Free-tier limits. A cap (for example 100 jobs) can force an upgrade halfway through a search. Know it before you start.
- Backups. For local tools, is there one-click backup, and does it remind you to use it?
Warning signs
- A privacy policy that doesn’t mention the tracker app at all, or no policy.
- “We may share data with partners” with no list of who.
- Inbox access required just to use the basic tracker.
- No export, or export only on a paid plan.
- Session-replay tools running inside the app where you type notes.
How HireWire answers the checklist
HireWire answers to the same standard:
- No account. Data is kept in browser localStorage, mirrored to IndexedDB.
- No inbox access. The CV is pasted and processed in the page, and only extracted skill keywords are kept.
- Analytics: PostHog with autocapture and session recording off. It sends named feature events only and is skipped under Do Not Track.
- No ad networks. Sponsor slots are plain links with no click tracking.
- Full JSON backup, plus .md, .json and .csv exports. A reminder appears when your backup is out of date.
- Its weak spot is the local-first one: if you clear site data without a backup, the data is gone.
The full detail is on the privacy page.
FAQ
Are free job trackers safe?
Most reputable ones are reasonably safe, but “free” covers very different set-ups. Check whether an account is required, where data is stored, whether it wants inbox access, what analytics and ads run in the app, and whether you can export and delete your data.
Is it safe to connect my Gmail to a job tracker?
It can be, but it is the broadest permission a tracker can ask for. Prefer tools that work from pasted emails, or that ask only for read-only, narrowly scoped access. Review connected apps in your Google account settings and remove ones you no longer use.
Are local, browser-only trackers safer?
For privacy, generally yes, because there is no server copy to leak. The trade-off is durability. Clearing browser data or Safari’s 7-day rule can erase it, so keep backups.
Open HireWireFree, no account. Your profile, CV text and pipeline stay in this browser.
Open HireWire →